CodeChecker vs GitHub CodeQL
CodeChecker
codechecker.readthedocs.io
GitHub CodeQL
codeql.github.comSide by side
| Figure | CodeChecker | GitHub CodeQL |
|---|---|---|
| Price from | — | $30/mo |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 0 | 5 |
| Spec score · C and C++ Static Analysis Tools | 7.5 (#14) | 8.5 (#4) |
| Spec score · Static Analysis Tools | 7.5 (#23) | 8.5 (#8) |
| Purpose | CodeChecker is static analysis infrastructure built on the LLVM/Clang Static Analyzer toolchain. | CodeQL is a language and toolchain for code analysis that treats code as data. |
Plans
GitHub CodeQL
- Free for research and open sourceFree
- GitHub Code Security$30 a month
- CodeQL for open source and researchFree
- GitHub Code Security$30 a month
- GitHub Free with CodeQL code scanningPrice not published
In their own words
CodeChecker
CodeChecker is free, open-source static-analysis infrastructure built on LLVM and Clang Static Analyzer tooling. Its command-line tools run supported analyzers against a JSON compilation database and generate reports. The web interface stores, filters, compares, and visualizes findings, including code bug paths, while reviewers can comment and set status. Reanalysis can be limited to changed files and their dependencies. Listed language coverage includes C/C++, C#, Java, Python, JavaScript, TypeScript, Go, and Markdown. Integrations cover Gerrit, GitLab, and a reusable GitHub Actions workflow. A Visual Studio Code extension runs analysis, reanalyzes saved files, and browses reports. Servers can run locally or in Docker, with PostgreSQL or SQLite storage and configurable authentication. CodeChecker requires Python 3.11 or later.
GitHub CodeQL
GitHub CodeQL has no write-up on Specifiction yet; its figures are above.